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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows: 

1 , (Currently Amended) A method for conveying a security context, comprising: 

obtaining a virtual address associated with a process executing on a recipient 
computer system; 

issuing a first Internet Protocol version compliant packet, wherein the first Internet 
Protocol version compliant packet comprises a first Internet Protocol version 
compliant header, wherein the first Internet Protocol version compliant 
header comprises a security context, wherein the security context comprises a 
Supemet identifier, a Channel identifier, and the virtual address, and wherein 
data in [[the]] a pavload of the first Internet Protocol version compliant 
packet is encrypted using the Supemet identifier and the Channel identifier to 
obtain an encrypted payload : 

issuing a second Internet Protocol version compliant packet, wherein the second 
Internet Protocol version compliant packet comprises a second Internet 
Protocol version compliant header, wherein the second Internet Protocol 
version compliant header comprises a second Internet Protocol version 
compliant address of the recipient computer system, wherein a payload of the 
second Internet Protocol version compliant packet comprises the first Internet 
Protocol version compliant packet, and proponding on ioouod packet with a 
second Intornot Protoool voroion header producing a oooond Intornot Protocol 
voraion oompliant packet, wherein the first Internet Protocol version is 
different from the second Internet Protocol version; and 

forwarding the second Internet Protocol version compliant packet to the recipient 
computer system* 

wherein the security context is used by the recipient computer to decrypt the 
encrypted payload. 
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2. (Original) The method of claim 1, wherein the first Internet Protocol version compliant 
packet is Internet Protocol version 6 compliant packet. 

3. (Original) The method of claim 1, wherein the second Internet Protocol version compliant 
packet is Internet Protocol version 4 compliant packet. 

4. (Previously Presented) The method of claim 1, wherein issuing the first Internet Protocol 
version compliant packet further comprises: 

invoking a Supernet Attach Command on an authentication server daemon; 
receiving, in response to the Supernet Attach Command, Supernet configuration 

information comprising the security context; and 
registering a mapping of the Supernet configuration information with a virtual 

address daemon. 

5. (Cancelled) 

6. (Previously Presented) The method of claim 1, wherein the security context comprises a 128 
bit unique value. 

7. (Previously Presented) The method of claim 6, wherein the 128 bit unique value comprises a 
16 bit set and a 1 12 bit set. 

8. (Original) The method of claim 7, wherein the 1 6 bit set denotes a site local Internet protocol 
address comprising 12 bits for an address prefix followed by 4 bits for a zero value. 

9. (Original) The method of claim 7, wherein the 1 1 2 bit set comprises contiguous bits for the 
Supernet identifier, the Channel identifier, and the virtual address. 

10. (Original) The method of claim 7, wherein the 112 bit set comprises a 64 bit Supernet 
identifier, a 24 bit Channel identifier, and a 24 bit virtual address. 

11. (Original) The method of claim 4, wherein the virtual address daemon maps the virtual 
address of the recipient process within the Supernet to an actual Internet protocol address. 
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1 2. (Cancelled) - 29. (Cancelled) 

30. (Currently Amended) A method for processing a security context, comprising: 

receiving a first Internet Protocol version compliant packe t comprising a first Internet 
Protocol version compliant header and a first Internet __Protocol version 
compliant pavload, wherein the first Internet Protocol version compliant 
pavload comprises encapsulat e d by a second Internet Protocol version 
compliant packet, wherein the first second Internet Protocol version 
compliant packet comprises encrypted data and a second Internet Protocol 
version compliant header comprising a security context, wherein the security 
context comprises a virtual address, a Supernet identifier, and a Channel 
identifier, 



extracting the encrypted data and the security context from the fifst second Internet 
Protocol version compliant packet onoapqulatod by the oooond Intornot 



decrypting the encrypted dat a, by a recipient computer system, in the first Intornot 
P rotocol version compliant packet using the Supernet identifier and Channel 
identifier to obtain decrypted data; and 

routing the decrypted data to a process in the recipient computer system using the 
virtual address^ 

wherein the first Internet Protocol version compliant header comprises a first Internet 
Protocol version compliant address used to route the first Internet Protocol 
version compliant packet to the recipient computer system . 



31. (Previously Presented) The method of claim 30, wherein the security context comprises a 
1 28 bit unique value. 

32. (Previously Presented) The method of claim 31, wherein the 128 bit unique value comprises 
a 16 bit set and a 1 12 bit set. 
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33. (Previously Presented) The method of claim 32, wherein the 16 bit set denotes a site local 
Internet protocol address comprising 12 bits for an address prefix followed by 4 bits for a 
zero value. 

34. (Previously Presented) The method of claim 32, wherein the 112 bit set comprises 
contiguous bits for the Supernet identifier, the Channel identifier, and the virtual address, 

35. (Previously Presented) The method of claim 32, wherein the 1 12 bit set comprises a 64 bit 
Supernet identifier, a 24 bit Channel identifier, and a 24 bit virtual address. 

36. (Currently Amended) The method of claim 30, wherein the security context is obtained from 
first the second Internet Protocol version compliant packet using a handler mechanism. 

37. (Previously Presented) The method of claim 34, wherein the handler mechanism is a 
Netfilter. 
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